Portugal's Supreme Court Blocks Double Trial of Football Leaks Whistleblower Rui Pinto

A Lisbon criminal court has acquitted Rui Pinto, the whistleblower behind Football Leaks, of all 241 criminal charges on April 29, 2026. The three-judge panel ruled that the indictment was fundamentally invalid because it prosecuted Pinto twice for the same conduct already addressed in his 2023 conviction—a decision legal observers are calling potentially transformative for Portuguese criminal procedure. The unanimous verdict from the Criminal Court of Lisbon is a scathing rebuke to the Portugal Public Prosecutor's Office, effectively barring the state from re-prosecuting Pinto on these grounds.

Why This Matters

• No double jeopardy: The court ruled that prosecuting Pinto twice for overlapping conduct violated his constitutional rights, applying the principle of ne bis in idem (the prohibition against double jeopardy), potentially setting a precedent for defendants facing multiple indictments.

• Judicial criticism: Presiding Judge Tânia Loureiro Gomes stated Pinto was treated "in three different ways" and became a victim of judicial arbitrariness, with his human dignity disregarded.

• Prior conviction stands: Pinto's September 2023 sentence—four years suspended for extortion attempt, illegal access, and correspondence violation—remains in force, as does his six-month suspended sentence in France for hacking Paris Saint-Germain emails.

• Third investigation pending: A separate inquiry into similar allegations is still open, though today's reasoning may complicate any future charges.

The Second Trial's Collapse

Prosecutors had charged Pinto with 201 counts of qualified illegal access, 22 counts of aggravated correspondence violation, and 18 counts of computer damage. The allegations centered on his infiltration of email systems belonging to Sport Lisboa e Benfica, the Portugal Football League, law firms representing clubs, judges, public prosecutors, the Portugal Tax Authority (Autoridade Tributária), and the National Internal Security Network (Rede Nacional de Segurança Interna). Trial proceedings opened on January 13, 2025, and ran for more than three months before the verdict.

In its written decision, the court determined that the charges overlapped substantially with facts already litigated in Pinto's first trial. Prosecutors had split the case after victims—many of whom only discovered the intrusions during the initial investigation—filed additional complaints. But the judges concluded that dividing a single course of conduct into multiple prosecutions amounted to procedural violence and breached the principle of ne bis in idem, which bars double jeopardy.

The bench emphasized that Pinto had been subjected to inconsistent treatment across proceedings, undermining the fairness and predictability expected in criminal justice. By declaring the indictment invalid rather than merely acquitting on the merits, the court sent an unmistakable signal that the prosecution strategy itself was unlawful.

What This Means for Residents

For anyone living in Portugal—whether citizen, expat, or long-term resident—the ruling has immediate implications for understanding the limits of state power and the protection of individual rights within the Portuguese legal system.

Legal precedent: If upheld on appeal, today's decision could reshape how prosecutors handle complex cybercrime or financial-fraud cases involving multiple victims over extended periods. Defense attorneys are already calling the verdict "revolutionary," arguing it will force the Portugal Public Prosecutor's Office to consolidate charges rather than pursuing serial indictments that expose defendants to compounding legal jeopardy.

Judicial accountability: Judge Tânia Loureiro Gomes' language—accusing the system of arbitrariness and dignity violations—is rare in Portuguese jurisprudence and may embolden other courts to scrutinize prosecutorial tactics more closely. For residents navigating bureaucratic or legal challenges, the ruling underscores that even high-profile cases are not immune to procedural safeguards.

No immediate threat to prior sentence: Pinto's 2023 conviction, which included a four-year suspended term and amnesty for 79 additional charges under the 2023 World Youth Day amnesty law, remains enforceable. That means he is still subject to probation conditions and any violation could trigger imprisonment. The French conviction for the PSG hack also stands, though it carries no custodial component.

Pending third inquiry: A separate investigation—covering similar hacking activity—has not yet resulted in charges. Prosecutors now face a strategic dilemma: press forward and risk another dismissal on double-jeopardy grounds, or close the file and accept that Pinto's legal exposure has reached its ceiling.

The Football Leaks Phenomenon and Its Fallout

Rui Pinto launched Football Leaks in 2015, releasing millions of confidential documents that exposed financial engineering, tax-avoidance schemes, and clandestine player transfers across European football. The leaks implicated top-tier clubs—including Manchester City, Paris Saint-Germain, and Real Madrid—and triggered UEFA Financial Fair Play investigations, tax-authority audits, and internal disciplinary proceedings.

In Portugal, the fallout hit Sport Lisboa e Benfica hardest. Internal emails revealed litigation strategies, player-transfer commissions, and communications with agents and lawyers. A former Benfica finance director testified during the first trial that the disclosures "almost paralyzed" the club and inflicted significant reputational damage. The leaks also fed parallel investigations into alleged referee manipulation and improper influence within Portuguese football governance, though many of those cases were later archived or dismissed for lack of corroborating evidence.

Paris Saint-Germain faced UEFA scrutiny over a €215 M annual sponsorship deal with Qatar's tourism authority, which regulators suspected was designed to circumvent spending caps. The leaks also disclosed the true cost of Neymar's record transfer and detailed Kylian Mbappé's rejected overtures from Real Madrid, including salary demands and contract perks.

Despite the global media impact, few criminal or regulatory sanctions directly resulted from the Football Leaks disclosures. UEFA investigations yielded settlements rather than bans, and Portuguese authorities struggled to convert hacked emails into admissible evidence. Pinto's dual role—as both investigative source and criminal defendant—complicated attempts to leverage the material in court.

Benfica and Defense Reactions

Benfica, which joined the second trial as a civil party, has consistently argued that the leaked correspondence was obtained illegally and stripped of context. Club lawyers described the prosecution as essential to defending institutional integrity. Pinto's defense team countered that Benfica constructed a "dramatic fiction" to obscure genuine misconduct exposed by the leaks.

Following today's acquittal, defense counsel criticized the Portugal Public Prosecutor's Office for pursuing what they termed an "absolutely personalized, perverse, and illegal strategy" designed to prevent Pinto from rebuilding his life. They argued that serial prosecutions, each covering overlapping time frames and conduct, amounted to harassment masquerading as law enforcement.

Legal commentators noted the verdict's timing: April 29, 2026, marks nearly a decade since the first Football Leaks publications and more than four years since Pinto's 2020 extradition from Hungary to Portugal. His cooperation with Portuguese and European authorities—providing evidence in money-laundering and corruption probes—earned him protected-witness status during the first trial, a factor that may have influenced today's judicial critique of prosecutorial conduct.

Broader Implications for Portuguese Justice

If today's decision survives appellate review, it could trigger a judicial reckoning across pending cases. Defendants facing multiple indictments for conduct arising from a single investigation may seek dismissals on double-jeopardy grounds. Prosecutors will need to bundle charges more carefully at the outset, rather than relying on sequential filings as new victims come forward.

The ruling also highlights friction between Portugal's digital-evidence laws and the realities of modern cybercrime. Pinto accessed thousands of accounts over several years, with victims discovering breaches at different times. The court's insistence on treating that activity as a unitary offense—rather than a series of discrete crimes—places a premium on prosecutorial speed and coordination, qualities that large, multi-jurisdictional investigations often lack.

For residents and businesses in Portugal, the verdict serves as a reminder that even sophisticated hacking operations can yield legal outcomes shaped as much by procedural missteps as by the underlying conduct. Whether the Portugal Public Prosecutor's Office appeals or accepts the loss remains to be seen, but today's decision has already reframed the Football Leaks saga from a story of whistleblowing versus cybercrime into a cautionary tale about the limits of prosecutorial discretion.